Local Privilege Escalation Vulnerability in VIPRE Advanced Security by ThreatTrack

CVE-2024-7239

What is CVE-2024-7239?

A vulnerability in VIPRE Advanced Security enables local attackers to escalate privileges by exploiting a flaw within the Anti Malware Service. Attackers can create a symbolic link to manipulate the service, thereby allowing them to delete files and execute arbitrary code with elevated privileges in the context of the SYSTEM account. To successfully exploit this vulnerability, an attacker must first run low-privileged code on the system. As a result, this vulnerability poses a significant risk for installations of VIPRE Advanced Security, requiring immediate attention from system administrators.

References